DroidSheep Tool - Android App For Hackers

DroidSheep is an android tool developed by Andreas Koch for security analysis in wireless networks. It is basically a session hijacking tool that allows hackers to capture session cookies over the wireless network. That means you can sniff and capture the web session profiles of a person who is on the same network.

Like Faceniff?

Not exactly, both FaceNiff and DroidSheep are the tools capable of hijacking the web session profiles over a wireless network.

But the problem with FaceNiff is, it only works with a list of websites while the DroidSheep works with almost all the websites/services.

How DroidSheep Works?

When you press the start button, DroidSheep will acts as a router to monitor and intercept all the network traffic (if you enabled ARP spoofing) and then display active session profiles.

How To Use DroidSheep To Hijack Sessions?

Before going into the how to section, make sure that your android phone is rooted.

If your phone is rooted.... Let's begin!

Also, make sure, you have a target on the same network who is using HTTP to access a web account.

Download the DroidSheep. Note: Download link is at the end of this article.

Install it.....

Then open DroidSheep, now you have a window like this:

Make sure you have enabled "ARP spoofing" and "Generic mode".

ARP spoofing: DroidSheep will act as a router and intercept all the network traffic.

Generic Mode: It listens for any cookie, not only for the sites you know.

Then... Tap on "Start" button..

Wait few seconds..

It will display active session profiles. See the image below:

Then tap on the victim's session profile..... it will display a set of options such as Open Site, Remove from List, Add host to blacklist, Export via eMail and Save Cookies.

Open Site: It allows you to use victim's account as him/her.

Remove From List: Removes the selected session from the list.

Add host to blacklist: Prevents capturing cookies from the selected server in future.

Export via eMail: It allows you to send the cookie values via Email (This helps you to use the session the computer).

Save Cookies: It allows you to save the cookies for later use.

If you want to use victim's web account as him/her, tap on "Open Site".... it will take you there. Enjoy....

What Are Other Options Available On DroidSheep?

It has Clear list, Clear Blacklist, Debug, Choose WiFi and Help. Clear list allows you to clear the captured cookie sessions and the Clear blacklist allows you to clear the list of blacklisted servers.

If you are experiencing any issues while running DroidSheep, you can collect debug information through the "Debug" option. Press menu and tap Debug for starting a debug session. Then it will ask you for starting a debug session. Tap on "Yes".

DroidSheep then starts running in debug mode, after 30 seconds, you can tap stop debugging. Then it will show you a set of options to send an email with the debug information.

You can select the target network by using "Choose WiFi" option. Help option is for your own help!

Open AircrackGUI and then enable "monitor mode". Then scan for the networks. Select a network and start capturing the packets on the "Capture/Deauth" tab.

If you are attacking WPA/WPA2 network, you can deauthenticate to get the handshake. When you get the handshake, stop capturing and start cracking!!!!

If you are attacking a WEP network, you can start Fake Authentication on the first tab. You have tostart capturing first, because Fake Auth needs the channel to be fixed.If the network uses Shared Key Authentication, you have to Deauth a client first to get the XOR file.Once you get it (you can check the capture tab), restart Fake Auth, and it will use the file automatically.

Then you can start ARP Replaying on the third tab, to increase the IVS Capturing rate.Finally you can crack the wep key using the same tab.

Hi can you recommend a good app or remote logger I can use to on a samung s mini to track password and accounts for face book and other bits I can log on to the rooter wifi on my phone only but need to see what the other person does on tjere phone linked on same rooter

Sir, I am using reaver to hack WiFi and bcmon is not supported because I am using mediatek chipset and I am using Lenovo TAB 2A7-10F . So I made costom script like start,warm and stop scripts to enable monitor mode but after enabling monitor mode it is showing bmon_wrapper_loadedamd error:only position independent executable (PIE) are supported...

What should I do sir

Will you please tell me the solution or is there any other app to use in my device?

Why I started this blog?

I started this blog to share my passion with the world. Now it is a part of my daily life. I have a tech blog too, but this one is my favourite, because I really, really like to talk about hacking and security.